I claim 

1 . A cryptographic method, where a non-empty set F of encryption keys Fi, F2, F3, . . . are 
associated with one single decryption key B satisfying b(J{m))=m for any input m and for b 
being a decryption function employing B and for /being an encryption function employing 
5 any Fj e F, comprising: 

obtaining arbitrary and/or random input from which cryptographic keys are generated; 

generating a decryption key; 

generating one of a plurality of corresponding encryption keys; 
supplying an encryptor with said encryption key; 
1 0 accepting a message m; 

encrypting m by said encryptor to ciphertext c using said encryption key; 

supplying a decryptor with said decryption key; and 

decrypting c by said decryptor to recover m using said decryption key. 

15 2. A cryptographic method for establishing a secret between two parties comprising: 

generating a secrecy primitive; and 

establishing said secret between said two parties using said secrecy primitive. 

3. A cryptographic method as in claim 1 comprising: 
20 obtaining arbitrary and/or random input from which cryptographic keys are generated; 
generating a decryption key; 

generating a corresponding encryption key through a series of transforms where at least 
one of said transforms facilitates the introduction of arbitrary or random noise of any 
desired sufficient amount; 
25 supplying an encryptor with said encryption key; 

accepting a message m; 

encrypting m by said encryptor to ciphertext c using said encryption key; 
supplying a decryptor with said decryption key; and 
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decrypting c by said decryptor to recover m using said decryption key. 

4. A cryptographic method as in claim 1 comprising: 

obtaining arbitrary and/or random input from which cryptographic keys are generated; 
5 generating a decryption key including a set of parameters p in normal positional number 

representation; 
generating a corresponding encryption key comprising: 
converting p to self-contained components; 

constructing encryption key parameters from said self-contained components by 
10 inserting zero or more arbitrary/random components in arbitrarily or randomly 

chosen component positions; and 
generating all other encryption key parameters; 
supplying an encryptor with said encryption key; 
accepting a message m; 
1 5 encrypting m by said encryptor to ciphertext c using said encryption key; 

supplying a decryptor with said decryption key; and 
decrypting c by said decryptor to recover m using said decryption key. 

5. A cryptographic method, as in claim 1, adopting n integer functions //, /2, ...,/« 
20 mapping from [0, 2^) to [0, 2''+5), where h > 1 and 2^+5 > 1, comprising: 

obtaining arbitrary and/or random input from which cryptographic keys are generated; 
generating a decryption key, including the generation of a first set of positive integers X 

={xi, X2, x„} and a second set of positive integers W = {wi, W2, w„} satisfying 

Xi > PiXi + P2X2 + ... + Pi-iXi.i + yiwi + y2W2 + ... + YiW; where, for l<i<n, yj =/<pi) 
25 and Pi e[0,2^); 

transforming X to Y = {yi, y2, yn} and W to U = {uj, U2, Un}, including an 

optional permutation and one or more rounds of invertible strong modular 

multiplication; and 
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further transforming Y to Z = {zi, Z2, Zn} U to V ^ {vi, V2, Vp} satisfying the 
following: 

a. P01 Pi5 Pt-i are pairwise co-prime 

b. Zi = (Zi,o, Zi4, Zi,qt-i) for l<i<n and q > 1 

5 c. J = {jo, ji, jk-i} is a set of arbitrary or random indices where 0<jo, jk-i^t 

d. S = {so, Si, Sk.i} is an arbitrary or random set satisfying: 
0<So, Si, Sk.i<qtj and S % t = {so%t, Si%t, Sk.i%t} = J 

e. ripjeJ > Piyi + P2y2 + ^ • . + PnYn + YlUj + y2U2 + . . . + ynU„ 

f. Zi,seS = yi%Ps%t 

10 g. Zi^sgs are arbitrary or random numbers modulo p^^t for 0<s<qt 

Vj = (vi,o, Vi^i, Vi^qt-i) for l<i<n 

i. y^seS = Wi % Ps%t 

j. \\^s€s are arbitrary or random numbers modulo Ps„^t for 0<s<qt. 

15 6. A cryptographic method as in claim 5 further comprising: 

supplying an encryptor with said encryption key; 

encrypting by said encryptor one or more nh-bit data blocks which are divided into h-bit 
sub-blocks di, d2, dn, where each block is encrypted to c = (co, Ci, Cqt-i) with Cg 

= (dlZi,, + d2Z2,s + ... + d„Zn,, +/7(di)Vi,s +/2(d2)V2,s + ... +/«(dn)Vn,s) % Ps%t for 0< 

20 s<qt; 

supplying a decryptor with said decryption key; and 

decrypting by said decryptor each of said encrypted blocks c to recover said data blocks, 
by extracting C={Cs|sgS} from c and by repeating, for each dj for l<i<n, the 
following: 

25 a. converting C to a form where dj can be determined 

b. obtaining dj from said converted C 

c. removing from said converted C the quantity that di introduced. 
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7. A cryptographic method as in claim 6, where said encryption is carried out, in lieu, 
independently on self-contained components, comprising: 

calculating c by carrying out two or more of said additions (+) and/or by computing two 
5 or more of said terms djZij and Mdi)\^ in parallel. 

8. A cryptographic method, as in claim 1, for communicating a message securely from a 
first party E to a second party D comprising: 

obtaining at party D arbitrary and/or random input from which cryptographic keys are 
10 generated; 

generating at party D a decryption key to be kept secret; 

generating at party D one of a plurality of corresponding encryption keys; 

distributing said encryption key from party D to party E; 

accepting a message m at party E; 
15 encrypting m to ciphertext at party E, employing said encryption key; 

transmitting said ciphertext from party E to party D; 

receiving said ciphertext at party D; and 

decrypting said ciphertext at party D to recover m, employing said decryption key. 

20 9. A cryptographic method as in claim 8 further comprising: 

applying chaining in the encryption of m to c with zero or more blocks of arbitrary or 
random bits pre-pended to m. 

10. A cryptographic method, as in claim 5, using dynamic mapping for communicating a 
25 message securely from a first party E to a second party D which generates said encryption 
key to be kept secret and said decryption key to be sent to party E, further comprising: 

agreeing upon a set of mapping functions fj,f2, ^ ,fn for said current communication by 
said two parties, where said set of mapping functions only observe their domain and 
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range restrictions and are independent of and unrelated to any other encryption or 

decryption parameters; 
distributing said encryption key from party D to party E; 
accepting a message m at party E; 

encrypting m to ciphertext at party E, employing said encryption key and fi,f2^ -^fn\ 
transmitting said ciphertext from party E to party D over a communication chaxmel; 
receiving said ciphertext at party D; and 

decrypting said ciphertext at party D to recover m, employing said decryption key and /y, 

11. A cryptographic method, as in claim 2, where one encryption key is associated 
with a non-empty set of decryption keys Bx,i, 3^,2? Bx,n satisfying 6/(/(m)) ^bj(J{m)) 
for one or more input m if with 6/ and bj being decryption functions employing B^^ and 
Bx,j respectively and /being an encryption function employing F^, comprising: 

obtaining at a first party D arbitrary and/or random input from which cryptographic keys 
are generated; 

generating at party D secret decryption keys B^ B\ B*" where B'' g Bx for l<x<k; 
generating at party D encryption keys Fi, F2, F^ as said secrecy primitive, where Fx 

corresponds to Bx for l<x<k; 
distributing said encryption keys from party D to a second party E; and 
establishing said secret between said two parties by making use of said encryption keys 

and decryption keys. 

12. A cryptographic method, as in claim 11, for establishing said secret comprising: 
generating at party D said encryption keys and decryption keys; 

distributing said encryption keys from party D to party E; 
receiving said encryption keys at party E; 

encrypting arbitrary or random data blocks at party E employing said encryption keys; 
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transmitting said encrypted data blocks from party E to party D over a communication 
channel; 

receiving at party D said encrypted data blocks from party E; 

decrypting said encrypted data blocks employing said decryption keys at party D to 
5 obtain information/characteristics about said data blocks; and 

communicating to party E by party D, based on said information/characteristics gained 
about said data blocks, instructions to transform a special entity to a form from which 
party E leams said secret party D intends to convey and establish. 

10 13. A cryptographic method as in claim 12 ftirther comprising: 

using said established secret for fiarther secure communications and cryptographic 
applications between said two parties. 

14. A cryptographic method as in claim 1 for the zero-knowledge 
1 5 authentication/identification of a party possessing said secret decryption key comprising: 

proving said authenticity/identity by said party through the exhibition of the ability to 
decrypt any valid encrypted messages using said decryption key. 

15. A cryptographic system, where a non-empty set F of complete encryption keys Fi, F2, 
20 F3, ... are associated with one single decryption key B satisfying 6(/(m))=m for any input m 

and for b being a decryption mechanism employing B and for / being an encryption 
mechanism employing any Fi e F, comprising: 

means for obtaining arbitrary and/or random input from which cryptographic keys are 
generated; 

25 means for generating a decryption key; 

means for generating one of a plurality of corresponding encryption keys; 
means for supplying an encryptor with said encryption key; 
means for accepting a message m; 
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means for encrypting m by said encryptor to ciphertext c using said encryption key; 

means for supplying a decryptor with said decryption key; and 

means for decrypting c by said decryptor to recover m using said decryption key. 

5 16. A cryptographic system as in claim 15 comprising: 

means for obtaining arbitrary and/or random input from which cryptographic keys are 
generated; 

means for generating a decryption key including a set of parameters p in normal 
positional number representation; 
10 means for generating a corresponding encryption key comprising: 
means for converting p to self-contained components; 

means for constructing encryption key parameters from said self-contained 
components by inserting zero or more arbitrary/random components in arbitrarily 
or randomly chosen component positions; and 
1 5 means for generating all other encryption key parameters; 

means for supplying an encryptor with said encryption key; 
means for accepting a message m; 

means for encrypting m by said encryptor to ciphertext c using said encryption key; 
means for supplying a decryptor with said decryption key; and 
20 means for decrypting c by said decryptor to recover m using said decryption key. 

17. A cryptographic system, as in claim 15, with means for implementing n integer 
functions /y, /2, ^ fn mapping from [0, 2*") to [0, 2*^+5), where h > 1 and 2**+5 > 1, 
comprising: 

25 means for obtaining arbitrary and/or random input from which cryptographic keys are 

generated; 

means for generating a decryption key, including the generation of a first set of positive 
integers X ={xi, X2, Xn} and a second set of positive integers W = {wi, W2, 
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Wn} satisfying Xi> piXi + P2X2 + ... + Pi-iXj.i +yiWi +y2W2 + ... +yiWi where, for l<i 

<n,7i=/<Pi)andPi€[0,2»^); 
means for transforming X to Y = {yi, y2, Yn} and W to U = {ui, U2, . . Un}, including 

an optional permutation and one or more rounds of invertible strong modular 
5 multiplication; 

means for further transforming Y to Z = {zj, Z2, Zn} and U to V = {vi, V2, Vn} 

satisfying the following: 

a. po, pi^ Pt-i are pairwise co-prime 

b. Zi - (Zi,o, Zi4, Zi,qt.i) for l<i<n and q > 1 

10 c. J ^ {jo, ji, jk-i} is a set of arbitrary or random indices where 0<jo, j25 jk-i<t 

d. S {so, Si, Sk.i} is an arbitrary or random set satisfying: 
0<So, Sj, Sk_i<qt, and S % t = {so%t, Si%t, Sk.i%t} = J 

e. ripjEJ > Piyi + hVl + . . . + PnYn + YlUl + y2U2 + . . . + ynUn 

f. Zi,seS = yi % Ps%t 

1 5 g. Zi,sgs are arbitrary or random numbers modulo Ps%t for 0<s<qt 

h. Vi = (Vi^o, Vi,i, Vi,qt-i) for l<i<n 

i. Vi,,^s^Wi%Ps.,4 

j- Vi^s^s are arbitrary or random numbers modulo Ps-^t for 0<s<qt. 

20 18. A cryptographic system as in claim 17 further comprising: 

means for supplying an encryptor with said encryption key; 

means for encrypting by said encryptor one or more nh-bit data blocks which are divided 
into h-bit sub-blocks di, d2, dn, where each block is encrypted to c ^ (co, Ci, 
Cqt-i) with c, = (dizi,s + d2Z2,s + ... + dnZn^s +/7(di)vi,s +/2(d2)v2,s + - +/«(d„)v„,,) % 
25 ps%t for 0<s<qt; 

means for supplying a decryptor with said decryption key; and 

means for decrypting by said decryptor each of said encrypted blocks c to recover said 
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data blocks, by extracting C = {c^ | s e S} from c and by repeating, for each d, for l<i 
<n, the following: 

a. converting C to a form where dj can be determined 

b. obtaining dj from said converted C 

5 c, removing from said converted C the quantity that dj introduced. 

19. A cryptographic system as in claim 18, where said encryption is carried out, in lieu, 
independently on self-contained components, comprising: 

means for calculating c by carrying out two or more of said additions (+) and/or by 
10 computing two or more of said terms djZij andy;{di)Vij in parallel. 

20. A cryptographic system, as in claim 15, for communicating a message securely from 
a first party E to a second party D comprising: 

means for obtaining at party D arbitrary and/or random input from which cryptographic 
1 5 keys are generated; 

means for generating at party D a decryption key to be kept secret; 

means for generating at party D one of a plurality of corresponding encryption keys; 

means for distributing said encryption key from party D to party E; 

means for accepting a message m at party E; 
20 means for encrypting m to ciphertext at party E, employing encryption key; 

means for transmitting said ciphertext from party E to party D; 

means for receiving said ciphertext at party D; and 

means for decrypting said ciphertext at party D to recover m, employing said decryption 
key. 
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